Karthikeyan Bhargavan, Carl A. Gunter, Elsa L. Gunter, Michael Jackson, Davor Obradovic, Pamela Zave. The Village Telephone System: A Case Study in Formal Software Engineering. In Jim Grundy, Malcolm C. Newey, editors, Theorem Proving in Higher Order Logics, 11th International Conference, TPHOLs 98, Canberra, Australia, September 27 - October 1, 1998, Proceedings. Volume 1479 of Lecture Notes in Computer Science, pages 49-66, Springer, 1998.